dslreports logo
site
 
    All Forums Hot Topics Gallery
spc

spacer




how-to block ads


Search Topic:
uniqs
581
share rss forum feed

mysec
Premium
join:2005-11-29
kudos:4

1 edit

netstat question

When querying "netstat -an" one of my UDP returns is:

UDP 0.0.0.0:445 *:*

where 0.0.0.0:445 is the local address:port

and *:* is the foreign address.

I've not been able to find out what *.* refers to.

thanks,

-rich

HELLFIRE
Premium
join:2009-11-25
kudos:18
Did you include the command switch to check what executeable(s) it may be associated with?

If this is Windows, dollars to donuts this is the Windows Shares listener -- »en.wikipedia.org/wiki/List_of_TC···_numbers

Regards

OZO
Premium
join:2003-01-17
kudos:2
reply to mysec
It's UDP (listening) port and as such, it's connectionless (comparing to TCP, which has two connection ends). UDP packet could be sent to any address. Thus, the "Foreign Address" is always unknown (in other words, it could be any), which is indicated here as *.*.
--
Keep it simple, it'll become complex by itself...

mysec
Premium
join:2005-11-29
kudos:4
reply to HELLFIRE
said by HELLFIRE:

Did you include the command switch to check what executeable(s) it may be associated with?

If this is Windows, dollars to donuts this is the Windows Shares listener --


Yes it is. I don't have "shares" enabled.

The "exe" is Windows "System."

thanks,

----
rich

mysec
Premium
join:2005-11-29
kudos:4

1 recommendation

reply to OZO
said by OZO:

It's UDP (listening) port and as such, it's connectionless (comparing to TCP, which has two connection ends). UDP packet could be sent to any address. Thus, the "Foreign Address" is always unknown (in other words, it could be any), which is indicated here as *.*.


Thanks for that info!

----
rich